For example: If you are managing a mixed Linux-Windows environment and want to manually define POSIX attributes or SSH login attributes for an AD user, but the AD policy does not allow it, you can use ID views to override the attribute values. When the AD user authenticates to clients running SSSD or authenticates using a compat LDAP tree, the new values are used in the authentication process.
Only IdM users can manage ID views. AD users cannot.
The process for overriding the attribute values follows these steps:
Create a new ID view.
Add a user ID override in the ID view, and specify the require attribute value.
Apply the ID view to a specific host.